Lucene search

[email protected]CVE-2013-0481

HistoryJul 03, 2013 - 1:54 p.m.

CVE-2013-0481

2013-07-0313:54:00

CWE-200

[email protected]

web.nvd.nist.gov

ibm

sterling

b2b integrator

file gateway

cve-2013-0481

nvd

security

vulnerability

remote attack

stack trace

error

exception

6.6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.0%

JSON

The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering (1) an error or (2) an exception.

CPENameOperatorVersion
ibm:sterling_b2b_integratoribm sterling b2b integratoreq5.2
ibm:sterling_b2b_integratoribm sterling b2b integratoreq5.1
ibm:sterling_file_gatewayibm sterling file gatewayeq2.1
ibm:sterling_file_gatewayibm sterling file gatewayeq2.2

CPE	Name	Operator	Version
ibm:sterling_b2b_integrator	ibm sterling b2b integrator	eq	5.2
ibm:sterling_b2b_integrator	ibm sterling b2b integrator	eq	5.1
ibm:sterling_file_gateway	ibm sterling file gateway	eq	2.1
ibm:sterling_file_gateway	ibm sterling file gateway	eq	2.2

References

www-01.ibm.com/support/docview.wss?uid=swg21627986

www-01.ibm.com/support/docview.wss?uid=swg21640830

exchange.xforce.ibmcloud.com/vulnerabilities/81546

6.6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.0%

JSON

Related for CVE-2013-0481

cvelist1 ibm2 prion1